CWEweakness

CWE-1232 Improper Lock Behavior After Power State Transition

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

Register lock bit protection disables changes to system configuration once the bit is set. Some of the protected registers or lock bits become programmable after power state transitions (e.g., Entry and wake from low power sleep modes) causing the system configuration to be changeable.

Common consequences

• Access Control: Modify Memory

Potential mitigations

• [Architecture and Design, Implementation, Testing] • Security Lock bit protections should be reviewed for behavior across supported power state transitions. • Security lock programming flow and lock properties should be tested in pre-silicon and post-silicon testing including testing across power transitions.

Related

Attack pattern · CAPEC (1)

  • CAPEC-166 Force the System to Reset Values attack pattern

Child of · CWE (1)

  • CWE-667 Improper Locking weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-166 Force the System to Reset Values attack pattern